cFocus Software seeks a Sr. Systems Engineer (Security) to join our program supporting the Department of Health and Human Services (HHS) This position is remote. This position requires the ability a Public Trust clearance.
Qualifications:
- Bachelor’s degree in Information Technology, Engineering, Cybersecurity, or related field.
- Minimum of 8 years of experience in systems engineering with a focus on security infrastructure.
- Strong experience with Windows Server, Linux (e.g., Red Hat Enterprise Linux), and virtualization platforms.
- Hands-on experience supporting enterprise security tools and SOC infrastructure.
- Strong understanding of NIST RMF, NIST SP 800-53, FISMA, and federal cybersecurity requirements.
- Experience with scripting and automation (PowerShell, Python, Bash).
- Ability to troubleshoot complex system, integration, and performance issues.
- Active CISSP, GCED, GSEC, GCIA, AWS, or Red Hat Certification (preferred).
Duties:
- Engineer, deploy, configure, and maintain the underlying infrastructure for security tools and platforms within the HRSA SOC and IT environment.
- Support enterprise security tooling including SIEM, SOAR, EDR, vulnerability management, forensic, and monitoring platforms.
- Design and implement high availability, redundancy, and failover configurations for mission-critical security systems.
- Perform system performance tuning, capacity planning, and optimization for security infrastructure.
- Design and maintain integration architectures between security tools and HRSA IT systems to improve monitoring and response capabilities.
- Engineer automation solutions and scripts to streamline security operations and reduce manual processes.
- Support infrastructure changes following HRSA change management processes, including development of technical implementation and rollback plans.
- Create, update, and maintain system architecture diagrams, SOPs, configuration baselines, network diagrams, and system inventories.
- Document engineering workflows, deployment procedures, testing protocols, and configuration standards.
- Collaborate with Security Architects, SOC personnel, Network Operations, Cloud teams, and ISSOs to resolve complex technical issues.
- Support vulnerability remediation, incident response, and system recovery activities from an engineering perspective.
- Participate in audits, assessments, and compliance reviews by providing engineering evidence and technical explanations.
- Ensure systems meet NIST SP 800-53 control requirements and support continuous monitoring objectives.
- Provide technical recommendations for modernization, tool enhancement, and infrastructure improvements.
